WebSec0/.golangci.yml at main · JoshuaMart/WebSec0 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
version: "2"

run:
  timeout: 5m
  tests: true

linters:
  default: standard       # govet, errcheck, ineffassign, staticcheck, unused
  enable:
    - gosec               # security audit
    - revive              # style + correctness
    - gocritic            # opinionated bug/style checks
    - bodyclose           # ensure http.Response.Body is closed
    - misspell
    - unconvert
    - unparam

  settings:
    gosec:
      excludes:
        - G304            # file inclusion via variable — we read configured paths (legacy id)
        - G703            # path traversal via taint analysis — same intent as G304 in gosec v2
    revive:
      rules:
        - name: blank-imports
        - name: context-as-argument
        - name: error-return
        - name: error-strings
        - name: errorf
        - name: increment-decrement
        - name: var-naming
        - name: var-declaration
        - name: package-comments
        - name: range
        - name: receiver-naming
        - name: time-naming
        - name: unexported-return
        - name: indent-error-flow
        - name: superfluous-else
        - name: unused-parameter
        - name: unreachable-code
    gocritic:
      enabled-tags:
        - diagnostic
        - performance
        - style

  exclusions:
    rules:
      - path: _test\.go
        linters:
          - errcheck
          - gosec
          - unparam
          - bodyclose

formatters:
  enable:
    - gofumpt
    - goimports

issues:
  max-issues-per-linter: 0
  max-same-issues: 0